Fuse is an AI-first energy company on a mission to make energy abundant and affordable, fast. We combine first-principles thinking with cutting-edge technology to build a radically better energy system.
We've raised over $200M from top-tier investors including Balderton, Lakestar, Accel, Creandum, Lowercarbon, Ribbit, 20VC, Hummingbird and Collaborative Fund, alongside strategic angels including Nico Rosberg and GPs behind Meta, Revolut, Spotify and Uber.
We're building a fully integrated energy company: developing our own solar, batteries and other generation projects, building our own hardware, improving and developing grid infrastructure, trading power in real time, and installing distributed energy in homes. By selling directly to consumers, we cut out the middleman, lower costs and pass the savings on to our customers.
About the role
We're looking for a Senior or Lead Security Engineer (Detection & Response) to build out the next generation of detection systems.
You'll sit within the team responsible for security across our IT and cloud environment, spanning AWS, identity, endpoints, SaaS and data center infrastructure. You'll own security monitoring and detection end-to-end: anticipating how our systems could be compromised, ensuring we have the right telemetry to see it, and building the detections and response workflows to act on it.
Think of it like SRE for security. We want someone who can answer questions like: Has this account been compromised? Is someone accessing AWS who shouldn't be? Has an attacker moved laterally through our network? How would we know?You'll also lead investigations and incident response, automate repetitive security work, and work with IT and Engineering to fix the underlying problems you uncover.
Responsibilities
Own security monitoring and detection across AWS, identity, endpoints, SaaS, networks and data center environments
Build and maintain the telemetry and logging pipelines needed to detect security incidents, and continuously test and improve detection coverage
Lead security investigations and incident response from detection through containment, recovery and post-mortem
Proactively hunt for threats and identify gaps in our visibility, controls and detection coverage
Build automation to improve detection, investigation and response, making effective use of AI and emerging tools to improve efficiency and capabilities.
Work closely with IT and Engineering to turn security findings into preventative controls and better system design
Develop and test incident response playbooks and continuously improve our response capability
Implement and enhance internal AI agents and security bots that assist with monitoring, investigations, reporting, and other security operation tasks.
Requirements
Significant hands-on experience in detection engineering, security engineering, incident response, threat hunting or a similar technical role
Strong understanding of cloud environments, ideally AWS, and how to monitor them for unauthorised or suspicious activity
Strong networking fundamentals and an understanding of how attackers move through networks and systems
Strong understanding of attacker tradecraft and the ability to turn it into useful, high-signal detections
Experience investigating real security incidents and taking ownership through to resolution
Strong scripting or programming skills, ideally Python, and a habit of automating repetitive work
Experience with security monitoring and response tooling such as SIEM, EDR, SOAR or equivalent
Strong systems thinking and a natural instinct for asking “how would we know if this was compromised?”
Comfortable working autonomously and closely with IT and Engineering teams
Curious about emerging AI capabilities and proactive in experimenting with AI-assisted development, automation and security workflows.
Strong candidates may also have experience with
AWS security telemetry including CloudTrail, GuardDuty, VPC Flow Logs and IAM
Detection-as-code, Sigma, Git-based detections and automated testing
CrowdStrike, SentinelOne, Defender or another EDR
Network security monitoring, PCAP, NetFlow/sFlow or firewall telemetry
Digital forensics, threat intelligence, purple teaming or security validation
Data centre or colocation security, including OOB networks and BMC/IPMI
Security automation, AI-assisted development or applying AI/LLMs to security engineering and operations.
Energy, trading, fintech, critical infrastructure or other high-value-target environments
Benefits
Competitive salary and eligibility for equity
Biannual bonus scheme
Fully expensed tech to match your needs
Private health insurance
Breakfast and dinner allowance for office-based employees
... response, security operations, incident response, or related consulting services - Demonstrable hands-on experience across multiple CDR areas, such as SIEM, detection engineering security automation, incident response, transformation, governance, or operating model design - Experience leading cybersecurity projects, workstreams, ...
... assessment. - Participate in an on-call rotation and in scheduled change windows, including occasional work outside standard business hours. Role Purpose The Senior Engineer for Endpoint Security is the senior technical owner of the endpoint protection estate — endpoint detection and response, anti-malware, application and ...
... assessment. - Participate in an on-call rotation and in scheduled change windows, including occasional work outside standard business hours. Role Purpose The Senior Engineer for Endpoint Security is the senior technical owner of the endpoint protection estate — endpoint detection and response, anti-malware, application and ...
... diagrams. - Advise clients on security best practices and platform optimization. - Participate in projects related to XDR, Security DevOps, AI Security, Cloud Security, and SASE/SSE technologies. Our requirements: - 4+ years of experience in Cybersecurity Engineering, Security Operations, Detection Engineering, or Security ...
... description - maybe it suits you or one of your friends? Aviva is looking for a Cyber Response Technical Team Lead to manage and develop a team of experienced Senior Cyber Security Analysts within our Global Security Operations Centre (GSOC). This role is a combination of hands-on technical work and people leadership responsibility. ...
... improvement of Microsoft-based security solutions across cloud and on-premises environments., The project covers a broad range of cybersecurity areas, including security monitoring, threat detection, incident response, vulnerability management, identity and access management, endpoint security, cloud security, and security automation., ...
... delivery. THE CHALLENGE We are looking for a Lead DevSecOps Engineer to join our Information Security organisation in Warsaw. This role sits at the intersection of Security, Platform Engineering and Software Development. You will be responsible for integrating security controls into engineering workflows, enabling developers to ...
... proactively addressing threats and fostering a culture of security across our product and operations. We're looking for a Staff Detection Engineer to join our Threat Response team in our Warsaw innovation hub. You'll own how we find threats: the detection logic, the telemetry it runs on, and the pipeline that ships it. Detection ...
... this position has a strong focus on SIEM administration, detection engineering, security content, data-source onboarding, use-case lifecycle management, and detection optimization . You’ll work closely with Threat Intelligence, Incident Response, and Cybersecurity Operations teams to turn security requirements and emerging ...
... Terraform and Ansible., Relevant certifications, such as OSCP, eJPT, AWS certifications (including AWS Certified Security – Specialty) or CISSP., Experience in detection engineering or writing SIEM queries (e.g. OpenSearch, Elastic, Splunk, Grafana)., Experience in CSIRT, incident response or cyber forensics, especially in ...
... resilience and detection capabilities., Develop and refine playbooks and use cases to enhance incident detection and response processes., Collaborate with cybersecurity and IT teams to improve overall security posture and incident handling procedures. At least 3 years of experience in cybersecurity incident management or analyst ...